Backup ISP Links

[hbkhelpdesk]

I am trying to setup a Backup ISP for an ASA5505. I have successfully configured the interfaces, routes and tracking. One interface is called outside and the other is called failover. When the cable is pulled from the outside interface, the failover route becomes active. However, no traffic is going from the inside interface through the failover interface. I can reach the failover interface via ASDM or putty. It seems like I may have a nat issue from inside to the failover interface. Any help would greatly be appreciated. Thanks.

[Marvin Rhoads · Accepted solution]

The NAT looks OK.

Shouldn't the failover interface be security-level 0?

By default, same-security traffic is not permitted inter-interface.

[hbkhelpdesk]

That makes sense. I will set it to 0 and give it a try. Thank you.